{"as_of":"2026-08-08T23:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:efea1e0dab04e0a11815db614aa603a80f94c2d9c3d673e97bee0bcf1a1de8d4","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:16:19.855050Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-07T00:16:19.855050Z","title":"Bob’s model was not trained on Alice’s protected dataset","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14913","last_updated":"2025-06-17T18:46:45Z","snapshot_observed_at":"2026-08-08T01:57:43.900224Z","submitted_at":"2025-06-17T18:46:45Z","title":"Winter Soldier: Backdooring Language Models at Pre-Training with Indirect Data Poisoning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T00:16:19.855050Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2506.14913"},"observation_digest":"sha256:65b8db6f966177e7173e7375082644aa80e5cb52356334c7dfc5148d0f2f470d","observation_id":"082b1191-bacf-4ebe-a5b2-0de12c787e04","resolution":{"observed_at":"2026-08-07T00:16:19.855050Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":"2410.13722","doi":"10.48550/arxiv.2410.13722","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Persistent pre-training poisoning of llms.ArXiv, abs/2410.13722:null","venue":"arXiv (Cornell University)","work_id":"bd454aed-d822-40ca-944a-fa323431f2be","year":2024},"citing_paper":{"arxiv_id":"2507.02850","last_updated":"2026-04-20T16:20:19Z","snapshot_observed_at":"2026-08-08T22:29:26.063319Z","submitted_at":"2025-07-03T17:55:40Z","title":"LLM Hypnosis: Exploiting User Feedback for Unauthorized Knowledge Injection to All Users","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-19T05:58:17.452837Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2507.02850"},"observation_digest":"sha256:daaddd1a3f62c6d7d5f302c53a1413be28e362d150c3219c98fee2df49c366bd","observation_id":"61930fa2-0d60-4976-bcaf-c99b7b2e7c9e","resolution":{"observed_at":"2026-05-19T06:02:07.835933Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-06T17:30:02.613382Z","title":"Persistent pre-training poisoning of llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.613382Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:66a5a35800eae51f849c185f674b3fe09caf20c21c415c609f52da24f6340aa1","observation_id":"7172ed78-bb13-4fd4-be47-6d7877ac3bd1","resolution":{"observed_at":"2026-08-06T17:30:02.613382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":"2410.13722","doi":"10.48550/arxiv.2410.13722","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Persistent pre-training poisoning of llms.ArXiv, abs/2410.13722:null","venue":"arXiv (Cornell University)","work_id":"bd454aed-d822-40ca-944a-fa323431f2be","year":2024},"citing_paper":{"arxiv_id":"2604.23593","last_updated":"2026-04-26T08:03:32Z","snapshot_observed_at":"2026-08-01T01:43:18.294936Z","submitted_at":"2026-04-26T08:03:32Z","title":"When AI reviews science: Can we trust the referee?","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-08T06:19:54.727724Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2604.23593"},"observation_digest":"sha256:6262099cb7a19122000ddb78bcf6b78d9d06f61decb2167f9aa6f7b41f53fbcc","observation_id":"3ae4ac16-e89d-40dc-ada3-b5091055e954","resolution":{"observed_at":"2026-05-08T23:19:30.034085Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":"2410.13722","doi":"10.48550/arxiv.2410.13722","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Persistent pre-training poisoning of llms.ArXiv, abs/2410.13722:null","venue":"arXiv (Cornell University)","work_id":"bd454aed-d822-40ca-944a-fa323431f2be","year":2024},"citing_paper":{"arxiv_id":"2605.01130","last_updated":"2026-05-01T22:01:31Z","snapshot_observed_at":"2026-08-04T07:16:37.388618Z","submitted_at":"2026-05-01T22:01:31Z","title":"Iterative Finetuning is Mostly Idempotent","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-09T19:04:36.210200Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2605.01130"},"observation_digest":"sha256:610c5a662b8d9e1f09390a30609e6ab381c98982fe4986f406d95572b0463d88","observation_id":"918a8d02-283b-44f1-8730-1e5230347b31","resolution":{"observed_at":"2026-05-11T15:51:44.658177Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":"2410.13722","doi":"10.48550/arxiv.2410.13722","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Persistent pre-training poisoning of llms.ArXiv, abs/2410.13722:null","venue":"arXiv (Cornell University)","work_id":"bd454aed-d822-40ca-944a-fa323431f2be","year":2024},"citing_paper":{"arxiv_id":"2606.03344","last_updated":"2026-06-02T08:54:37Z","snapshot_observed_at":"2026-08-02T15:32:07.510420Z","submitted_at":"2026-06-02T08:54:37Z","title":"RogueMerge: Robust and Unified Attacks against LLM Model Merging","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-06-28T10:05:10.309553Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2606.03344"},"observation_digest":"sha256:1b85a4c0da19b3aba055f0662026e8807e0177e4f1aa3da253268e1a541f81b6","observation_id":"e118ca89-f883-4a34-80ce-3557b3882b90","resolution":{"observed_at":"2026-07-02T03:26:28.943210Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":"2410.13722","doi":"10.48550/arxiv.2410.13722","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Persistent pre-training poisoning of llms.ArXiv, abs/2410.13722:null","venue":"arXiv (Cornell University)","work_id":"bd454aed-d822-40ca-944a-fa323431f2be","year":2024},"citing_paper":{"arxiv_id":"2606.17110","last_updated":"2026-06-15T07:04:01Z","snapshot_observed_at":"2026-08-05T23:11:05.452983Z","submitted_at":"2026-06-15T07:04:01Z","title":"Loss Landscape Poisoning: Targeted Extraction of Unseen Training Data from LLMs","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-06-27T03:59:30.468854Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2606.17110"},"observation_digest":"sha256:2dd61bce7d110993530157395af1d476b7dba7db3286e1e7b659199c6ed12761","observation_id":"d8c6d084-3453-4988-8c84-78214b01b05d","resolution":{"observed_at":"2026-07-03T17:38:43.820421Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":"2410.13722","doi":"10.48550/arxiv.2410.13722","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Persistent pre-training poisoning of llms.ArXiv, abs/2410.13722:null","venue":"arXiv (Cornell University)","work_id":"bd454aed-d822-40ca-944a-fa323431f2be","year":2024},"citing_paper":{"arxiv_id":"2606.29657","last_updated":"2026-07-10T21:53:01Z","snapshot_observed_at":"2026-07-16T23:17:54.967525Z","submitted_at":"2026-06-28T23:55:29Z","title":"Safety from Honesty in a Disinterested AI Predictor","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-06-30T06:53:19.737408Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2606.29657"},"observation_digest":"sha256:315b6de308df3c1a688dd301eb343fb5a649494664c2725278b8ba4d337144ca","observation_id":"689f63ea-f1a3-4521-ac61-77ba4512e7b3","resolution":{"observed_at":"2026-06-30T06:54:20.238453Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-07-14T17:02:19.189814Z","title":"Persistent pre-training poisoning of llms, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.29657","last_updated":"2026-07-10T21:53:01Z","snapshot_observed_at":"2026-07-16T23:17:54.967525Z","submitted_at":"2026-06-28T23:55:29Z","title":"Safety from Honesty in a Disinterested AI Predictor","version":2},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-07-14T17:02:19.189814Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2606.29657"},"observation_digest":"sha256:265e070b3443f008f8e24c779c87b6bf397010f10de6f3686823e0c4807ca5d2","observation_id":"208515e5-8200-47c3-9bc9-69c654786b2b","resolution":{"observed_at":"2026-07-14T17:02:19.189814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":"2410.13722","doi":"10.48550/arxiv.2410.13722","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Persistent pre-training poisoning of llms.ArXiv, abs/2410.13722:null","venue":"arXiv (Cornell University)","work_id":"bd454aed-d822-40ca-944a-fa323431f2be","year":2024},"citing_paper":{"arxiv_id":"2606.30783","last_updated":"2026-06-29T18:11:17Z","snapshot_observed_at":"2026-08-08T22:30:38.879886Z","submitted_at":"2026-06-29T18:11:17Z","title":"Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-07-01T01:44:07.700127Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2606.30783"},"observation_digest":"sha256:29006be02aab422edf7e5707eecd160addcfd85cf03e425f9673434e4cbababa","observation_id":"5c10e7ca-2f94-423e-9b76-15ebc9eeb19f","resolution":{"observed_at":"2026-07-01T01:45:13.857887Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2410.13722/citation-record","integrity":"/paper/2410.13722/integrity","json":"/paper/2410.13722/citation-record.json","paper":"/paper/2410.13722"},"outbound":[],"paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2410.13722."}